7015868e17a6c9213e279fd998a40cabc8ab243be0a96bc76576b128ca4064ba | Triage

Sharing

General

Target

7015868e17a6c9213e279fd998a40cabc8ab243be0a96bc76576b128ca4064baN
Size

59KB
Sample

240920-l5kkaa1cjg
MD5

dad9af0c1518278fed1292650cb3c610
SHA1

5c3ab374701e18247c37f870f0fa36e04ecff44a
SHA256

7015868e17a6c9213e279fd998a40cabc8ab243be0a96bc76576b128ca4064ba
SHA512

f2830b5671bccc68dcc1b4d5f2e60c583976ecaa946261066dec899820fa6390a9f061d3e3627054c9f97d385d57b35dcb5ad4aadd245b024f6fea2fcd770cc8
SSDEEP

768:RFg6MM5jwlflosDyYoOyGuFexFbERYtj3eNYDA79b4VhlQ4/gMVXEmcO2X2p/1H+:RLMhlloZZyFbEGNeao4dQ4/gMbG2LBO

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7015868e17a6c9213e279fd998a40cabc8ab243be0a96bc76576b128ca4064baN
- Size
  
  59KB
- MD5
  
  dad9af0c1518278fed1292650cb3c610
- SHA1
  
  5c3ab374701e18247c37f870f0fa36e04ecff44a
- SHA256
  
  7015868e17a6c9213e279fd998a40cabc8ab243be0a96bc76576b128ca4064ba
- SHA512
  
  f2830b5671bccc68dcc1b4d5f2e60c583976ecaa946261066dec899820fa6390a9f061d3e3627054c9f97d385d57b35dcb5ad4aadd245b024f6fea2fcd770cc8
- SSDEEP
  
  768:RFg6MM5jwlflosDyYoOyGuFexFbERYtj3eNYDA79b4VhlQ4/gMVXEmcO2X2p/1H+:RLMhlloZZyFbEGNeao4dQ4/gMbG2LBO
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence